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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of tinrte may be available under the provisions of 37 CFR 1 .1 36(a). In no event however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- if the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)13 Responsive to communication{s) filed on 10/31/2007 . 
2a)n This action is FINAL. 2b)K This action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-14 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim{s) is/are allowed. 

6) K Claim(s) 1-14 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) S The specification is objected to by the Examiner. 

10) ^ The drawing(s) filed on 20 December 2001 is/are: a)S accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawlng{s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received, 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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Claim Status 

Claims 1-14 are pending. Claims 1-14 are rejected as detailed below. 

Lengthy Specification 
The lengthy specification has not been checked to the extent necessary to determine the 
presence of all possible minor errors. Applicant's cooperation is requested in correcting any 
errors of which applicant may become aware in the specification. The specification of the 
present application comprises 126 pages. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
- section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1, 2 and 4 are rejected under 35 U.S.C. 103(a) as being unpatentable over US Pat 
No 5,634,053 issued to Noble et al (hereafter Noble) in view of US Pat No 7,21 3,262 (EUey et . 
al), hereafter Elley. 
Claim 1: 

Noble discloses: 

a virtual database service [col 4, line 63 through col 5, line 3], 
comprising the virtual database table [col 5, lines 18-25], 
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wherein the virtual database table comprises one or more rows records, [col 5, line 20], each 
of the one or more rows comprising one or more fields [col 5, line 21], 

the query comprising a field name and an indication of manner for selecting a row [col 5, line 
60 -col 6, line 15], 

wherein the virtual database service is configured to receive the query, respond to the filed 
name and the indication of the manner for selecting a row as required to obtain the information 
to be provided fi-om the information source, and providing the information as a value of the field 
indicated by the field name in the selected row in response to the query [col 5, line 60 - col 6, 
line 15] 

Noble discloses the elements of the claimed invention as noted above but does not disclose 
an information source comprising the information to be provided in response to the query of the 
virtual database table, wherein the information source comprises an access evaiuator configured 
to determine whether a user may have access to an information resource within the information 
source. Elley discloses: 
column 1, lines 60-67: 

The first question involves a process called client authentication. The second involves reference 
to an authorization decision mechanism, such as an Access Control List (ACL) maintained by 
the server and containing a list of individual clients and/or client groups who are permitted 
access to the resource. The present invention relates to the determination of group membership 
or group non-membership of resource-requesting clients. 

It would have been obvious to one of ordinary skill in the art at the time the invention 
was made to modify Noble to include above limitation based on the teaching of Elley for the 
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purpose of ensuring integrity of the information contained in the virtual tables by controlhng 
access to the virtual tables. 
Examiner Notes: 

The claimed "access evaluator" has been interpreted according to the following which 
applicant provided in the response of 10/31/2007, 

Before the access control system in which the present invention is implemented can grant a user 
access to an information resource, it must do two things: authenticate the user, that is, determine 
that the user is the entity it claims to be; and make a user group membership determination, that 
is, determine whether the user's group memberships are such that the access policies for the 
information resource permit the user to access to the information resource. 
Claim 2: 

The combination of Noble and EUey discloses the elements of claim 1 as noted above and 
furthermore. Noble discloses a manner of selecting a row includes a selection value; and the 
information source provides a component of the information to be provided in response to a 
match between the selection value and a pattem that matches a plurality of values and is 
accessible to the information source [col 10, lines 20-25] 
Claim 4: 

The combination of Noble and Elley discloses the elements of claim 1 as noted above and 
furthermore, Noble discloses the information source is an access evaluator which determines 
whether a user may have access to an information resource; the manner of selecting the row 
includes information from which the user and the information resource may be determined; and 
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the provided information includes an indication of whether the user determined from the 
information may access the information resource determmed therefrom [col 12, lines 48-55] 

Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over the combination of 
Noble and EUey as applied to claim 1 and fiirther in view of The Coldfusion 4.0 Web 
Application Construction Kit, Third Edition by Ben Porta, Nate Weiss, Michael Dinowitz, 
Ashley King and Davis Crawford (hereafter Porta), Published December 23, 1998. 
Claim 3: 

The combination of Noble and Eley discloses the elements of the claimed invention as 
noted above but does not disclose wherein the query is an SQL query addressing the database 
table; the field name is contained in a SELECT clause in the query; and the indication of the 
manner of selecting a row is contained in a WHERE clause in the query. Porta discloses wherein 
the query is an SQL query addressing the database table; the field name is contained in a 
SELECT clause in the query; and the indication of the manner of selecting a row is contained in 
a WHERE clause in the query [Listing 8.6 and Pig 8.20]. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the above combination of 
references to include wherein the query is an SQL query addressing the database table; the field 
name is contained in a SELECT clause in the query; and the indication of the maimer of 
selecting a row is contained in a WHERE clause in the query as taught by Porta for the purpose 
of selecting a table and filtering out the rows which are not of interest. 
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Claims 5-10, 12 and 13 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
the combination of Noble and EUey as applied to claim 4 and further in view of US Pat No 
5,504,890 issued to Sanford (hereafter Sanford). 
Claim 5: 

The combination of Noble and elley discloses the elements of the claimed invention as 
noted above and furthermore, Noble discloses the elements of claim 1 as noted above but does 
not disclose the access evaluator determines whether the user may have access to the information 
resource by considering one or more access policies, each access policy indicating whether a 
user group may have access to a set of information resources and access by the user to the 
information resource being allowed when the access policies for the user groups to which the 
user belongs and the sets of information resources to which the information resource belongs so 
indicate; and the manner of selecting the row contains membership information about the user 
from which membership of the user in a user group may be determined. Sanford discloses the 
access evaluator determines whether the user may have access to the information resource by 
considering one or more access policies, each access policy indicating whether a user group may 
have access to a set of information resources and access by the user to the information resource 
being allowed when the access policies for the user groups to which the user belongs and the sets 
of information resources to which the information resource belongs so indicate; and the manner 
of selecting the row contains membership information about the user from which membership of 
the user in a user group may be determined [collaboration amongst contributors, col 2, lines 1 1- 
23]. It would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the above combination of references to include the access evaluator determines 



Application/Control Number: 10/019,101 Page 7 

Art Unit: 2161 

whether the user may have access to the information resource by considering one or more access 
policies, each access poHcy indicating whether a user group may have access to a set of 
information resources and access by the user to the information resource being allowed when the 
access policies for the user groups to which the user belongs and the sets of information 
resources to which the information resource belongs so indicate; and the manner of selecting the 
row contains membership information about the user from which membership of the user in a 
user group may be determined as taught by Noble for the purpose of controlling access such data 
consistency can be maintained. 
Claim 6: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1 and 5 as 
noted above and furthermore discloses the access evaluator uses the membership information to 
determine membership of the user in a user group [Sanford: Fig 8, col 12, lines 4-16]. 
Claim 7: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1, 5 and 6 
as noted above and fiirthermore discloses the access evaluator determines that there may be a 
user group such that membership in the user group would give the user access to the information 
resource; and the provided information indicates a method of providing further information about 
the user in a further query from which the user's membership in the user group can be determined 
[Sanford: collaboration identification, col 7, lines 20-23]. 
Claim 8: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1 and 4-7 
as noted above and furthermore discloses the further information includes authentication 
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information which may be used to validate the user's identity [Sanford: collaboration identity, col 
7, lines 20-23]. 
Claim 9: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1 and 4-8 
as noted above and furthermore discloses an additional information source that is an 
authenticator, the authenticator using the authentication information to validate the user's identity 
[Sanford: another collaboration identification, col 12, lines 35-41]. 
Claim 10: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1 and 4-9 
as noted above and furthermore discloses the response to the further query provides an indication 
whether the user's identity is valid [Sanford: Fig 8, col 12, lines 4-17]. 
Claim 12: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1, 4 and 5 
as noted above and furthermore discloses an additional information source that is an 
authenticator which validates the identity of the user; the authenticator uses the membership 
information to validate the identity of the user; the access evaluator determines membership of 
the user in a user group only after the authenticator has validated the user's identity [Sanford: Fig 
4, 125 collaboration number, col 7, lines 15-20]. 
Claim 13: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1 and 4 as 
noted above and furthermore discloses an additional information source that is an authenticator 
which validates an identity of the user; the manner of selecting the row includes authentication 
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information which the authenticator uses to validate the user's identity; and the provided 
information is obtained at least in part from the authenticator and includes an indication of 
whether the user's identity is valid [Sanford: Fig 4, 125 collaboration number, col 7, lines 15-20]. 

Claim 14 is rejected imder 35 U.S.C. 103(a) as being unpatentable over the combination 
of Noble and EUey and further m view of US Pat No 5,1 15,501 issued to Kerr (hereafter Kerr). 
Claim 14: 

The combination of Noble and EUey discloses the elements of claims 1 and 4 as noted 
above but does not disclose an additional information source that is a user profile information 
source which provides additional information about the user; the manner of selecting the row 
includes profile information gathering information which indicates to the profile information 
source how to gather the profile information; and the provided information is obtained at least in 
part from the profile information source and includes the profile infomiation. Kerr discloses an 
additional information source that is a user profile information source which provides additional 
information about the user; the maimer of selecting the row includes profile information 
gathering information which indicates to the profile information source how to gather the profile 
information; and the provided information is obtained at least in part from the profile information 
source and includes the profile information [Fig 6]. It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the above combination of 
references to include an additional information source that is a user profile information source 
which provides additional information about the user; the manner of selecting the row includes 
profile information gathering information which indicates to the profile information source how 
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to gather the profile information; and the provided information is obtained at least in part fi"om 
the profile information source and includes the profile information as taught by Kerr for the 
purpose of customization of the search query. 

Claim 1 1 is rejected under 35 U.S.C. 103(a) as being unpatentable over the combination 
of Noble, Elley and Sanford and fiirther in view of US Pat No 5,748,890 issued to Goldberg et al 
(hereafter Goldberg). 
Claim 11: 

The combination of Noble, Elley and Sanford discloses the elements of claims 1, 4 and 5 
as noted above but does not disclose an additional information source that is a user profile 
information source which provides additional information about the user; the information about 
the user includes a user information retrieval method specification that specifies how the user 
profile: information source provides the additional information; and the access evaluator uses at 
least some of the additional information to determine membership of the user in the user group. 
Goldberg discloses an additional information source that is a user profile information source 
which provides additional information about the user; the information about the user includes a 
user information retrieval method specification that specifies how the user profile: information 
source provides the additional information; and the access evaluator uses at least some of the 
additional information to determine membership of the user in the user group [user's role, claim 
3]. It would have been obvious to one of ordinary skill in the art at the time the invention was 
made to modify the above combination of references to include an additional information source 
that is a user profile information source which provides additional information about the user; the 
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information about the user includes a user information retrieval method specification that 
specifies how the user profile: information source provides the additional information; and the 
access evaluator uses at least some of the additional information to determine membership of the 
user in the user group as taught by Goldberg for the purpose of providing additional means of 
authenticating a user within a user's group. 

Response to Arguments 

Applicant's arguments filed 10/31/2007 have been carefully considered but are moot 
based on above new grounds of rejection. 

Contact Information 

Any inquiry concerning this communication or earlier communications fi:om the 
examiner should be directed to Etienne P. LeRoux whose telephone number is (571) 272-4022. 
The examiner can normally be reached Monday through Friday, 8:00 am - 4:30 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Apu Mofiz can be reached on (571) 272-4080. The fax phone number for the 
organization where this application or proceeding is assigned is (571) 273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

Etienne LeRoux 
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